You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@directory.apache.org by Bren Norris <br...@measanctum.com> on 2009/12/14 06:07:13 UTC
apache DS closes sockets with openLDAP
Hey guys,
I can run Softerra LDAP Administrator and easily add custom Object Classes
to the DIT... however when using ApacheDS openLDAP will shut the socket down
for the same operation.
Anyone have any immediate thoughts that spring to mind as to save me from
"known issues"?
Re: apache DS closes sockets with openLDAP
Posted by Stefan Seelmann <se...@apache.org>.
Quoting Bren Norris <br...@measanctum.com>:
> And finally,
>
> If need be I can rip out a protocol analyser (eg. Wireshark) so development
> for Apache directory studio can get to the very bottom of this if it's
> deemed a critical issue.
Yes, that would be great if you could provide us a network dump for both:
- Apache Directory Studio
- and Softerra Admin
Please create a Jira issue and attach the dumps there.
For communication with the LDAP server we currently just use JNDI. So
please let us know your Java version and OS.
Many Thanks,
Stefan
>
>
>
> On Thu, Dec 17, 2009 at 1:22 AM, Bren Norris
> <br...@measanctum.com>wrote:
>
>> Oh and don't forget no issues arise if you use Softerra LDAP
>> Administrator.. hopefully this isn't some java issue :/
>>
>>
>>
>>
>>
>> On Thu, Dec 17, 2009 at 1:21 AM, Bren Norris
>> <br...@measanctum.com>wrote:
>>
>>> Thanks for your help Stefanz,
>>>
>>> I've got the olcObjectClasses in the schema so thats good.
>>>
>>> The issue is when you try to make use of those objects in the frontend
>>> DIT.
>>>
>>> such as:
>>>
>>> #!RESULT ERROR
>>> #!CONNECTION ldap://somedomain.com:389
>>> #!DATE 2009-12-15T21:19:39.353
>>> #!ERROR somedomain.com:389; socket closed
>>> dn: arrCN=nogo,arrCN=orgRoot,dc=somedomain,dc=com
>>> changetype: add
>>> objectClass: arrOrganisation
>>> objectClass: top
>>> arrCN: nogo
>>> arrOrganisationName: theNogoOrganisation
>>>
>>> objectClass defintiion:
>>> ( 1.3.6.1.4.3.33524.99.2.3 NAME 'arrOrganisation' DESC 'An organisation
>>> object' SUP top STRUCTURAL MUST ( arrOrganisationName $ arrCN ) )
>>>
>>> attribute definitions:
>>> arrCN:
>>> ( 1.3.6.1.4.3.33524.99.1.14 NAME 'arrCN' DESC 'A playful Common Name '
>>> EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR
>>> caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
>>> )
>>>
>>> arrOrganisationName:
>>> ( 1.3.6.1.4.3.33524.99.1.13 NAME 'arrOrganisationName' DESC 'A playful
>>> Organisation Name' EQUALITY caseIgnoreMatch ORDERING
>>> caseIgnoreOrderingMatch
>>> SUBSTR caseIgnoreListSubstringsMatch SYNTAX
>>> 1.3.6.1.4.1.1466.115.121.1.15{100} SINGLE-VALUE )
>>>
>>> of note:
>>> The addition will work under the following scenarios.
>>> - Addition to dc=somedomain,dc=com (eg.
>>> arrCN=anOrganisation,dc=somedomain,dc=com).
>>> - The server resides in the local LAN (i.e on the same logical network).
>>>
>>>
>>>
>>>
>>> On Wed, Dec 16, 2009 at 5:27 AM, Stefan Seelmann
>>> <se...@apache.org>wrote:
>>>
>>>> Hi Bren,
>>>>
>>>> Bren Norris wrote:
>>>>>>
>>>>>> I can run Softerra LDAP Administrator and easily add custom Object
>>>>>>> Classes
>>>>>>> to the DIT... however when using ApacheDS openLDAP will shut the
>>>>>>> socket
>>>>>>> down
>>>>>>> for the same operation.
>>>>>>>
>>>>>> - Apache Directory Studio (version 1.5.2.v200091211)
>>>>>
>>>>> - Eclipse/Galileo on OSX/Snow Leopard
>>>>> - openLDAP server (version 2.3) on Ubuntu/Karmic 9.04.
>>>>>
>>>>
>>>> Thanks for the info.
>>>>
>>>> Could you please describe a bit more what you try to do. Do you want to
>>>> add new olcObjectClasses value to "cn=schema,cn=config" or one of
>>>> its child
>>>> entries? Do you receive and error message? Could you please post the
>>>> modification request from the modification logs view? Are there any error
>>>> messages in the OpenLDAP logs (try to start with -d1)?
>>>>
>>>> Please also note that OpenLDAP 2.3 is really old, you should upgrade to
>>>> the latest 2.4 version.
>>>>
>>>> Kind Regards,
>>>> Stefan
>>>>
>>>
>>>
>>
>
Re: apache DS closes sockets with openLDAP
Posted by Bren Norris <br...@measanctum.com>.
And finally,
If need be I can rip out a protocol analyser (eg. Wireshark) so development
for Apache directory studio can get to the very bottom of this if it's
deemed a critical issue.
On Thu, Dec 17, 2009 at 1:22 AM, Bren Norris <br...@measanctum.com>wrote:
> Oh and don't forget no issues arise if you use Softerra LDAP
> Administrator.. hopefully this isn't some java issue :/
>
>
>
>
>
> On Thu, Dec 17, 2009 at 1:21 AM, Bren Norris <br...@measanctum.com>wrote:
>
>> Thanks for your help Stefanz,
>>
>> I've got the olcObjectClasses in the schema so thats good.
>>
>> The issue is when you try to make use of those objects in the frontend
>> DIT.
>>
>> such as:
>>
>> #!RESULT ERROR
>> #!CONNECTION ldap://somedomain.com:389
>> #!DATE 2009-12-15T21:19:39.353
>> #!ERROR somedomain.com:389; socket closed
>> dn: arrCN=nogo,arrCN=orgRoot,dc=somedomain,dc=com
>> changetype: add
>> objectClass: arrOrganisation
>> objectClass: top
>> arrCN: nogo
>> arrOrganisationName: theNogoOrganisation
>>
>> objectClass defintiion:
>> ( 1.3.6.1.4.3.33524.99.2.3 NAME 'arrOrganisation' DESC 'An organisation
>> object' SUP top STRUCTURAL MUST ( arrOrganisationName $ arrCN ) )
>>
>> attribute definitions:
>> arrCN:
>> ( 1.3.6.1.4.3.33524.99.1.14 NAME 'arrCN' DESC 'A playful Common Name '
>> EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR
>> caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
>> )
>>
>> arrOrganisationName:
>> ( 1.3.6.1.4.3.33524.99.1.13 NAME 'arrOrganisationName' DESC 'A playful
>> Organisation Name' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch
>> SUBSTR caseIgnoreListSubstringsMatch SYNTAX
>> 1.3.6.1.4.1.1466.115.121.1.15{100} SINGLE-VALUE )
>>
>> of note:
>> The addition will work under the following scenarios.
>> - Addition to dc=somedomain,dc=com (eg.
>> arrCN=anOrganisation,dc=somedomain,dc=com).
>> - The server resides in the local LAN (i.e on the same logical network).
>>
>>
>>
>>
>> On Wed, Dec 16, 2009 at 5:27 AM, Stefan Seelmann <se...@apache.org>wrote:
>>
>>> Hi Bren,
>>>
>>> Bren Norris wrote:
>>>>>
>>>>> I can run Softerra LDAP Administrator and easily add custom Object
>>>>>> Classes
>>>>>> to the DIT... however when using ApacheDS openLDAP will shut the
>>>>>> socket
>>>>>> down
>>>>>> for the same operation.
>>>>>>
>>>>> - Apache Directory Studio (version 1.5.2.v200091211)
>>>>
>>>> - Eclipse/Galileo on OSX/Snow Leopard
>>>> - openLDAP server (version 2.3) on Ubuntu/Karmic 9.04.
>>>>
>>>
>>> Thanks for the info.
>>>
>>> Could you please describe a bit more what you try to do. Do you want to
>>> add new olcObjectClasses value to "cn=schema,cn=config" or one of its child
>>> entries? Do you receive and error message? Could you please post the
>>> modification request from the modification logs view? Are there any error
>>> messages in the OpenLDAP logs (try to start with -d1)?
>>>
>>> Please also note that OpenLDAP 2.3 is really old, you should upgrade to
>>> the latest 2.4 version.
>>>
>>> Kind Regards,
>>> Stefan
>>>
>>
>>
>
Re: apache DS closes sockets with openLDAP
Posted by Bren Norris <br...@measanctum.com>.
Oh and don't forget no issues arise if you use Softerra LDAP Administrator..
hopefully this isn't some java issue :/
On Thu, Dec 17, 2009 at 1:21 AM, Bren Norris <br...@measanctum.com>wrote:
> Thanks for your help Stefanz,
>
> I've got the olcObjectClasses in the schema so thats good.
>
> The issue is when you try to make use of those objects in the frontend DIT.
>
> such as:
>
> #!RESULT ERROR
> #!CONNECTION ldap://somedomain.com:389
> #!DATE 2009-12-15T21:19:39.353
> #!ERROR somedomain.com:389; socket closed
> dn: arrCN=nogo,arrCN=orgRoot,dc=somedomain,dc=com
> changetype: add
> objectClass: arrOrganisation
> objectClass: top
> arrCN: nogo
> arrOrganisationName: theNogoOrganisation
>
> objectClass defintiion:
> ( 1.3.6.1.4.3.33524.99.2.3 NAME 'arrOrganisation' DESC 'An organisation
> object' SUP top STRUCTURAL MUST ( arrOrganisationName $ arrCN ) )
>
> attribute definitions:
> arrCN:
> ( 1.3.6.1.4.3.33524.99.1.14 NAME 'arrCN' DESC 'A playful Common Name '
> EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR
> caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
> )
>
> arrOrganisationName:
> ( 1.3.6.1.4.3.33524.99.1.13 NAME 'arrOrganisationName' DESC 'A playful
> Organisation Name' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch
> SUBSTR caseIgnoreListSubstringsMatch SYNTAX
> 1.3.6.1.4.1.1466.115.121.1.15{100} SINGLE-VALUE )
>
> of note:
> The addition will work under the following scenarios.
> - Addition to dc=somedomain,dc=com (eg.
> arrCN=anOrganisation,dc=somedomain,dc=com).
> - The server resides in the local LAN (i.e on the same logical network).
>
>
>
>
> On Wed, Dec 16, 2009 at 5:27 AM, Stefan Seelmann <se...@apache.org>wrote:
>
>> Hi Bren,
>>
>> Bren Norris wrote:
>>>>
>>>> I can run Softerra LDAP Administrator and easily add custom Object
>>>>> Classes
>>>>> to the DIT... however when using ApacheDS openLDAP will shut the socket
>>>>> down
>>>>> for the same operation.
>>>>>
>>>> - Apache Directory Studio (version 1.5.2.v200091211)
>>>
>>> - Eclipse/Galileo on OSX/Snow Leopard
>>> - openLDAP server (version 2.3) on Ubuntu/Karmic 9.04.
>>>
>>
>> Thanks for the info.
>>
>> Could you please describe a bit more what you try to do. Do you want to
>> add new olcObjectClasses value to "cn=schema,cn=config" or one of its child
>> entries? Do you receive and error message? Could you please post the
>> modification request from the modification logs view? Are there any error
>> messages in the OpenLDAP logs (try to start with -d1)?
>>
>> Please also note that OpenLDAP 2.3 is really old, you should upgrade to
>> the latest 2.4 version.
>>
>> Kind Regards,
>> Stefan
>>
>
>
Re: apache DS closes sockets with openLDAP
Posted by Bren Norris <br...@measanctum.com>.
Thanks for your help Stefanz,
I've got the olcObjectClasses in the schema so thats good.
The issue is when you try to make use of those objects in the frontend DIT.
such as:
#!RESULT ERROR
#!CONNECTION ldap://somedomain.com:389
#!DATE 2009-12-15T21:19:39.353
#!ERROR somedomain.com:389; socket closed
dn: arrCN=nogo,arrCN=orgRoot,dc=somedomain,dc=com
changetype: add
objectClass: arrOrganisation
objectClass: top
arrCN: nogo
arrOrganisationName: theNogoOrganisation
objectClass defintiion:
( 1.3.6.1.4.3.33524.99.2.3 NAME 'arrOrganisation' DESC 'An organisation
object' SUP top STRUCTURAL MUST ( arrOrganisationName $ arrCN ) )
attribute definitions:
arrCN:
( 1.3.6.1.4.3.33524.99.1.14 NAME 'arrCN' DESC 'A playful Common Name '
EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch SUBSTR
caseIgnoreSubstringsMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
)
arrOrganisationName:
( 1.3.6.1.4.3.33524.99.1.13 NAME 'arrOrganisationName' DESC 'A playful
Organisation Name' EQUALITY caseIgnoreMatch ORDERING caseIgnoreOrderingMatch
SUBSTR caseIgnoreListSubstringsMatch SYNTAX
1.3.6.1.4.1.1466.115.121.1.15{100} SINGLE-VALUE )
of note:
The addition will work under the following scenarios.
- Addition to dc=somedomain,dc=com (eg.
arrCN=anOrganisation,dc=somedomain,dc=com).
- The server resides in the local LAN (i.e on the same logical network).
On Wed, Dec 16, 2009 at 5:27 AM, Stefan Seelmann <se...@apache.org>wrote:
> Hi Bren,
>
> Bren Norris wrote:
>>>
>>> I can run Softerra LDAP Administrator and easily add custom Object
>>>> Classes
>>>> to the DIT... however when using ApacheDS openLDAP will shut the socket
>>>> down
>>>> for the same operation.
>>>>
>>> - Apache Directory Studio (version 1.5.2.v200091211)
>>
>> - Eclipse/Galileo on OSX/Snow Leopard
>> - openLDAP server (version 2.3) on Ubuntu/Karmic 9.04.
>>
>
> Thanks for the info.
>
> Could you please describe a bit more what you try to do. Do you want to
> add new olcObjectClasses value to "cn=schema,cn=config" or one of its child
> entries? Do you receive and error message? Could you please post the
> modification request from the modification logs view? Are there any error
> messages in the OpenLDAP logs (try to start with -d1)?
>
> Please also note that OpenLDAP 2.3 is really old, you should upgrade to the
> latest 2.4 version.
>
> Kind Regards,
> Stefan
>
Re: apache DS closes sockets with openLDAP
Posted by Stefan Seelmann <se...@apache.org>.
Hi Bren,
>> Bren Norris wrote:
>>
>>> I can run Softerra LDAP Administrator and easily add custom Object Classes
>>> to the DIT... however when using ApacheDS openLDAP will shut the socket
>>> down
>>> for the same operation.
> - Apache Directory Studio (version 1.5.2.v200091211)
> - Eclipse/Galileo on OSX/Snow Leopard
> - openLDAP server (version 2.3) on Ubuntu/Karmic 9.04.
Thanks for the info.
Could you please describe a bit more what you try to do. Do you want to
add new olcObjectClasses value to "cn=schema,cn=config" or one of its
child entries? Do you receive and error message? Could you please post
the modification request from the modification logs view? Are there any
error messages in the OpenLDAP logs (try to start with -d1)?
Please also note that OpenLDAP 2.3 is really old, you should upgrade to
the latest 2.4 version.
Kind Regards,
Stefan
Re: apache DS closes sockets with openLDAP
Posted by Bren Norris <br...@measanctum.com>.
On Mon, Dec 14, 2009 at 6:13 PM, Stefan Zoerner <st...@labeo.de> wrote:
> Bren Norris wrote:
>
>> I can run Softerra LDAP Administrator and easily add custom Object Classes
>> to the DIT... however when using ApacheDS openLDAP will shut the socket
>> down
>> for the same operation.
>>
>
> I guess you mean Apache Directory Studio (the RCP client), not AoacheDS
> which is the server). Which versions of the Software (both client and
> server) do you use? Which OS?
>
> Greetings from Hamburg,
> StefanZ
>
>
Hi StefanZ,
You are correct - I'm using:
- Apache Directory Studio (version 1.5.2.v200091211)
- Eclipse/Galileo on OSX/Snow Leopard
- openLDAP server (version 2.3) on Ubuntu/Karmic 9.04.
Re: apache DS closes sockets with openLDAP
Posted by Stefan Zoerner <st...@labeo.de>.
Bren Norris wrote:
> I can run Softerra LDAP Administrator and easily add custom Object Classes
> to the DIT... however when using ApacheDS openLDAP will shut the socket down
> for the same operation.
I guess you mean Apache Directory Studio (the RCP client), not AoacheDS
which is the server). Which versions of the Software (both client and
server) do you use? Which OS?
Greetings from Hamburg,
StefanZ